Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: TwUm7Qt8E0U6uynbcKueRAve0hdOjNg9beGnxEIOR1Y=
Subject key identifier: 1B:A9:D1:68:DB:08:71:8B:EC:0F:9C:F3:18:19:2F:52:C0:6F:4C:33
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019CAD2287598B78B89733ADFAD6AB2F1D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 06:00:47 +0000
Manifest this update: Mon 02 Mar 2026 06:00:47 +0000
Manifest next update: Tue 03 Mar 2026 06:00:47 +0000
Files and hashes: 1: YYRSpcNyohXAVMmCQRhhQXcor54.roa (hash: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI=)
2: iKpp3qI47nAdkGSzRA3WViJJwfU.roa (hash: cua53JtZVRFiG1D02IQc2WZ6uSxKMIhsPK5IrnlN2iI=)
3: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (hash: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc=)
4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: CaBXMYeZaHs/g03XpgvlqzFtKjcsg1FZuSMAQJQGdbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:87:59:8b:78:b8:97:33:ad:fa:d6:ab:2f:1d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Mar 2 06:00:47 2026 GMT
Not After : Mar 3 06:00:47 2026 GMT
Subject: CN=1ba9d168db08718bec0f9cf318192f52c06f4c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:5d:ad:6f:bc:08:1c:e1:f1:1d:f4:69:b3:
56:f2:29:69:78:4e:8e:38:0b:5c:cf:49:be:2d:ab:
79:ec:b3:bc:52:15:12:9c:ab:aa:4b:a0:da:92:6d:
9f:8b:a8:98:2c:4f:c8:78:1c:97:a9:0f:3d:5d:2f:
ed:85:c6:c4:9b:d1:a0:60:1e:96:74:4e:3e:72:d2:
c4:3c:e0:3c:ab:ec:52:55:c2:dc:e4:96:3a:4d:55:
5e:33:a8:df:6a:9a:8c:60:42:de:de:8c:8c:24:dd:
2e:06:7d:0d:71:e1:8d:8c:7e:bf:0e:d2:58:eb:43:
62:b0:a1:7a:52:93:1e:b1:b5:f6:a9:ce:30:30:47:
92:9a:55:62:e4:60:86:1d:53:ad:69:78:08:b8:cf:
91:dd:42:01:36:79:83:4b:dd:53:82:a9:70:30:07:
8a:9b:da:52:c7:0f:3f:13:5a:37:79:02:5c:a4:f2:
07:f2:44:d6:1f:0e:fa:93:5f:5f:29:e2:f5:72:8e:
8e:a8:f5:7c:c7:1b:31:fe:b5:a7:39:5a:4b:86:66:
5a:03:7c:b3:f4:ab:ef:c6:14:2c:76:5e:95:01:f6:
e4:a1:ef:c1:9f:9a:2f:ae:c1:53:03:9d:db:b6:25:
8e:b5:5c:42:81:f5:04:d0:e2:a1:0b:cf:91:e0:ce:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:D1:68:DB:08:71:8B:EC:0F:9C:F3:18:19:2F:52:C0:6F:4C:33
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4c:b3:6c:d4:d5:84:a6:0d:3a:0c:9a:1c:66:28:f1:65:2d:
00:3b:26:a0:1d:6f:a1:e9:1a:36:41:94:a1:e0:57:40:f2:25:
3f:cb:86:0b:0a:cb:00:24:1e:bc:21:97:d4:e3:75:d2:8d:ff:
08:a7:bc:2d:1b:bb:eb:c9:a6:cd:3a:0b:72:bb:e0:c5:14:da:
47:2a:6f:9c:c2:7d:00:65:f6:44:7a:d3:97:13:d5:59:d6:d7:
94:ce:e3:dd:42:44:7d:2e:1f:18:89:02:57:61:88:03:eb:87:
47:de:3d:3d:e0:c3:d9:8f:6f:46:2d:a2:e7:94:71:87:5c:6e:
4e:43:23:2c:59:4f:3e:6b:5b:9c:9d:57:94:06:93:df:b0:be:
bb:f9:aa:a0:b2:c9:66:b3:77:df:6a:09:ca:e1:76:17:a2:eb:
dd:3d:37:8f:63:6a:d2:0a:48:85:79:8a:99:8e:9a:40:9f:fd:
92:0b:14:a8:ca:e2:05:cf:ee:15:8d:62:91:fe:9a:e1:d8:07:
9b:8d:c6:04:59:64:35:d3:63:ab:2c:cd:eb:53:68:c5:e3:cb:
72:a2:d2:e7:63:78:33:22:b8:47:2e:04:2f:56:f0:ed:6a:7d:
ac:55:d7:38:0c:23:e3:ec:11:07:b1:6b:a4:f8:1e:32:c9:27:
eb:a7:7c:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIodZi3i4lzOt+tarLx1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy
NDkxYzUwHhcNMjYwMzAyMDYwMDQ3WhcNMjYwMzAzMDYwMDQ3WjAzMTEwLwYDVQQD
EygxYmE5ZDE2OGRiMDg3MThiZWMwZjljZjMxODE5MmY1MmMwNmY0YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtNdrW+8CBzh8R30abNW8ilpeE6O
OAtcz0m+Lat57LO8UhUSnKuqS6Dakm2fi6iYLE/IeByXqQ89XS/thcbEm9GgYB6W
dE4+ctLEPOA8q+xSVcLc5JY6TVVeM6jfapqMYELe3oyMJN0uBn0NceGNjH6/DtJY
60NisKF6UpMesbX2qc4wMEeSmlVi5GCGHVOtaXgIuM+R3UIBNnmDS91TgqlwMAeK
m9pSxw8/E1o3eQJcpPIH8kTWHw76k19fKeL1co6OqPV8xxsx/rWnOVpLhmZaA3yz
9KvvxhQsdl6VAfbkoe/Bn5ovrsFTA53btiWOtVxCgfUE0OKhC8+R4M60twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBup0WjbCHGL7A+c8xgZL1LAb0wzMB8GA1UdIwQY
MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt
MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi
LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0yzbNTV
hKYNOgyaHGYo8WUtADsmoB1voekaNkGUoeBXQPIlP8uGCwrLACQevCGX1ON10o3/
CKe8LRu768mmzToLcrvgxRTaRypvnMJ9AGX2RHrTlxPVWdbXlM7j3UJEfS4fGIkC
V2GIA+uHR949PeDD2Y9vRi2i55Rxh1xuTkMjLFlPPmtbnJ1XlAaT37C+u/mqoLLJ
ZrN332oJyuF2F6Lr3T03j2Nq0gpIhXmKmY6aQJ/9kgsUqMriBc/uFY1ikf6a4dgH
m43GBFlkNdNjqyzN61NoxePLcqLS52N4MyK4Ry4EL1bw7Wp9rFXXOAwj4+wRB7Fr
pPgeMskn66d8Dw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:05 2026 by rpki-client